CVE-2021-38155
2 advisories.
PyPI/keystone CVE-2021-38155: high 7.5
OpenStack Keystone allows information disclosure during account locking
Action: Upgrade keystone to 16.0.2 or later.
pip install keystone==16.0.2pip install keystone==17.0.1pip install keystone==18.0.1pip install keystone==19.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0 | 16.0.2 | - |
| 17.0 | 17.0.1 | - |
| 18.0 | 18.0.1 | - |
| 19.0 | 19.0.1 | - |
Fixed versions
| 16.0.2 | 17.0.1 | 18.0.1 | 19.0.1 |
Sources
- osv: GHSA-4225-97pr-rr52
- https://nvd.nist.gov/vuln/detail/CVE-2021-38155
- https://github.com/openstack/keystone/commit/1b573ae7d1c20e0ebfbde79bbe7538a09589c75d
- https://github.com/openstack/keystone/commit/8ab4eb27be4c13c9bab2b3ea700f00a190521bf8
- https://github.com/openstack/keystone/commit/ac2631ae33445877094cdae796fbcdce8833a626
- https://github.com/openstack/keystone
- https://launchpad.net/bugs/1688137
- https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html
- https://security.openstack.org/ossa/OSSA-2021-003.html
- http://www.openwall.com/lists/oss-security/2021/08/10/5
CVE-2021-38155 · published · modified · JSON
PyPI/keystone CVE-2021-38155: high 7.5
OpenStack Keystone allows information disclosure during account locking
Action: Upgrade keystone to 16.0.2 or later.
pip install keystone==16.0.2pip install keystone==17.0.1pip install keystone==18.0.1pip install keystone==19.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0 | 16.0.2 | - |
| 17.0 | 17.0.1 | - |
| 18.0 | 18.0.1 | - |
| 19.0 | 19.0.1 | - |
Fixed versions
| 16.0.2 | 17.0.1 | 18.0.1 | 19.0.1 |
Sources
- osv: PYSEC-2026-830
- https://nvd.nist.gov/vuln/detail/CVE-2021-38155
- https://github.com/openstack/keystone/commit/1b573ae7d1c20e0ebfbde79bbe7538a09589c75d
- https://github.com/openstack/keystone/commit/8ab4eb27be4c13c9bab2b3ea700f00a190521bf8
- https://github.com/openstack/keystone/commit/ac2631ae33445877094cdae796fbcdce8833a626
- https://github.com/openstack/keystone
- https://launchpad.net/bugs/1688137
- https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html
- https://security.openstack.org/ossa/OSSA-2021-003.html
- http://www.openwall.com/lists/oss-security/2021/08/10/5
- https://pypi.org/project/keystone
- https://github.com/advisories/GHSA-4225-97pr-rr52
CVE-2021-38155 · published · modified · JSON